AZL-62420 CVE-2024-5171 affecting package libao 1.2.0-24

Integer overflow in libaom internal function imgallochelper can lead to heap buffer overflow. This function can be reached via 3 callers: Calling aomimgalloc with a large value of the dw, dh, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and so...

CVE-2024-5345

CVE-2024-5345 affects the WordPress plugin Responsive Owl Carousel for Elementor. The vulnerability is a Local File Inclusion (LFI) in all versions up to 1.2.0, exploitable via the layout parameter. Authenticated attackers with Contributor-level access and above can cause the server to include an...

WordPress Responsive Owl Carousel for Elementor plugin <= 1.2.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by stealthcopter in WordPress Plugin Responsive Owl Carousel for Elementor versions = 1.2.0...

WordPress plugin Responsive Owl Carousel for Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...

WordPress plugin Sticky banner 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

PT-2024-26352 · Unknown · Hidden Depth Sticky Banner

Name of the Vulnerable Software and Affected Versions: Hidden Depth Sticky banner versions 1.2.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can...

WordPress Sticky banner plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Rayhan Ramdhany Hanaputra Patchstack Alliance in WordPress Plugin Sticky banner versions = 1.2.0...

PT-2024-26213 · Unknown +2 · Integration For Pipedrive/Contact Form 7 +3

Name of the Vulnerable Software and Affected Versions: Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms versions 1.2.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to perform...

PT-2024-22282 · F5 · F5 Big-Ip Next Cnf

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP Next CNF versions 1.2.0 through 1.2.1 Description: Exposure of Sensitive Information issue exists in the GSLB container, which may allow an authenticated attacker with local access to view sensitive information. Recommendations: For...

PT-2024-25840 · Unknown · Chatbot Conversational Forms

Name of the Vulnerable Software and Affected Versions: Conversational Forms for ChatBot versions 1.2.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

WordPress ChatBot Conversational Forms plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Jean Tirstan T Patchstack Alliance in WordPress Plugin Conversational Forms for ChatBot versions = 1.2.0...

PT-2024-25229

Name of the Vulnerable Software and Affected Versions kubevirt versions 1.2.0 and earlier Description The issue allows a local attacker to execute arbitrary code via a crafted command to get the token component. This can be done by sending a crafted command to the /kubevirt.io/kubevirt API...

Kubevirt 安全漏洞

Kubevirt is a virtual machine manager. A security vulnerability exists in kubevirt v1.2.0 and earlier versions, which stems from a vulnerability that allows a local attacker to execute arbitrary code via a crafted command...

PT-2024-18829 · WordPress · Booster Extension

Name of the Vulnerable Software and Affected Versions: Booster Extension plugin for WordPress version 1.2.0 and earlier Description: The issue allows unauthenticated attackers to extract sensitive data, including user emails, via the booster extension authorbox shortcode display function...

PT-2024-13740 · Shenzhen · Shenzhen Jf6000 Cloud Media Collaboration Processing Platform

Name of the Vulnerable Software and Affected Versions: Shenzhen JF6000 Cloud Media Collaboration Processing Platform firmware version V1.2.0 Shenzhen JF6000 Cloud Media Collaboration Processing Platform software version V2.0.0 build 6245 Description: The issue is related to Incorrect Access...

JF6000 Cloud Media Collaboration Processing Platform 固件V1.2.0和、软件版本V2.0.0 build 6245 安全漏洞

Shenzhen Jieshi Feitong Technology JF6000 Cloud Media Collaboration Processing Platform is a cloud media collaboration processing platform from Shenzhen Jieshi Feitong Technology, China. JF6000 Cloud Media Collaboration Processing Platform is a cloud media collaboration processing platform from...

Mega Elements < 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Mega Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

Peplink Smart Reader 操作系统命令注入漏洞

Peplink Smart Reader is a smart reader from Peplink Inc. It is used for employee time and attendance. An operating system command injection vulnerability exists in Peplink Smart Reader v1.2.0, which stems from the presence of an operating system command injection vulnerability that could lead to...

Peplink Smart Reader 访问控制错误漏洞

Peplink Smart Reader is a smart reader from Peplink Inc. It is used for employee time and attendance. An access control error vulnerability exists in Peplink Smart Reader v1.2.0, which stems from the presence of an information disclosure vulnerability that could lead to the disclosure of sensitiv...

Peplink Smart Reader 访问控制错误漏洞

Peplink Smart Reader is a smart reader from Peplink Inc. It is used for employee time and attendance. An access control error vulnerability exists in Peplink Smart Reader version v1.2.0, which stems from the presence of a data integrity vulnerability that could lead to configuration modifications...